Hi there,
I’ve made two tiny plugins that I find useful for me.
The first plugin is named argsort. With it, you are able to optionally lowercase and then sort the query arguments.
I found this very useful for multi faceted apis, where you don’t have any control on how it is being consumed. See more info here: Argsort Module.
The second plugin is named cookieflag. With it, you are able to add or remove flags from all the Set-Cookie response headers. Currently it can only add / remove the Secure and HttpOnly flags, but I plan to also add a matcher and more flags / properties (Path, Domain, etc).
I found this useful to quickly patch a backend app to make it more secure and look good on the audit reports. Yes, I know you could kinda do it with fancy header_down. I don’t want to. See more info here: Cookieflag Module.
Thank you @matt, @francislavoie and @darkweak for their continuous help and guidance on all issues I’ve encountered so far [mis|ab]using caddy.
If you have nothing better to do, you might take a look at those plugins. All feedback would be greatly appreciated.